Unscored CVE-2016-2953 EUVD-2016-4026GHSA-55jm-7536-rfj7

IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 does not require SSL, which allows remote attackers to obtain sensitiv…

Published Nov 30, 2016 · Updated Aug 5, 2024 · Assigned by ibm

Description

IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 does not require SSL, which allows remote attackers to obtain sensitive cleartext information by sniffing the network.

References

LO90295 vendor-advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21990888
94415 vdb-entry
LO90268 vendor-advisory